CC3.3 CC3
Risk Assessment / CC3.3
Considering that someone inside might be the problem
In plain English
The assessment explicitly considers the potential for fraud, including the incentives, pressures and opportunities that could lead someone to override controls.